GHSA-jqfp-m5f8-vg28

Опубликовано: 16 дек. 2021

Источник: github

Github: Прошло ревью

CVSS3: 5.4

Описание

Dolibarr Cross Site Scripting (XSS) vulnerability

A Cross Site Scripting (XSS) vulnerability exists in Dolibarr before 14.0.3 via the ticket creation flow. Exploitation requires that an admin copies the payload into a box.

Ссылки

Пакеты

Наименование

dolibarr/dolibarr

composer

Затронутые версииВерсия исправления

< 14.0.3

14.0.3

EPSS

Процентиль: 50%

0.00271

Низкий

5.4 Medium

CVSS3

CVE ID

CVE-2021-42220

Дефекты

CWE-79

Связанные уязвимости

CVE-2021-42220

CVSS3: 5.4

ubuntu

около 4 лет назад

A Cross Site Scripting (XSS) vulnerability exists in Dolibarr before 14.0.3 via the ticket creation flow. Exploitation requires that an admin copies the payload into a box.

CVE-2021-42220

CVSS3: 5.4

nvd

около 4 лет назад

A Cross Site Scripting (XSS) vulnerability exists in Dolibarr before 14.0.3 via the ticket creation flow. Exploitation requires that an admin copies the payload into a box.

CVE-2021-42220

CVSS3: 5.4

debian

около 4 лет назад

A Cross Site Scripting (XSS) vulnerability exists in Dolibarr before 1 ...

EPSS

Процентиль: 50%

0.00271

Низкий

5.4 Medium

CVSS3

CVE ID

CVE-2021-42220

Дефекты

CWE-79